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System for receiving broadcast digital data comprising a master digital 
terminal, and at least one slave digital terminal 

Background of the invention 
1 . Field of the invention 

The present invention relates to a system for receiving broadcast 
digital data comprising a master digital terminal, and at least one slave digital 
terminal connected to the master terminal. 



10 2. Description of the related art 

The market for digital television decoders is currently reaching a 
turning point. Most subscribers, in the European Countries in particular, are 
equipped with a single digital terminal (or « decoder ») per household, where as 
they often possess at least two television sets. There therefore exists a demand 

15 for multiple equipment in terms of decoders for one and the same household. 

It will be noted that subsequently the terms « decoder » or «digital 
terminal » designate one and the same type of device making it possible to 
receive and decode (and possibly to descramble) digital signals broadcast by 
an operator (in particular a digital television operator). In the subsequent 

20 description use will also be made of the terms « scramble »/« descramble » or 
« encipher »/« decipher » to signify that an encryption/decryption algorithm is 
applied to data using a key. 

Certain operators of pay digital television wish to offer their 
subscribers the possibility of equipping themselves with several digital terminals 

25 so as to benefit from their services on each of the television sets installed in 
their accommodation, without however making them pay the price of a full tariff 
subscription for the additional terminals, which would be prohibited, but rather a 
reduced tariff (or even a zero tariff). However, the operator has to ensure that 
the terminals and « associated » subscriptions actually remain within the same 

30 household, since in the converse case, their income is at risk of being 
considerably affected thereby. 

A known solution consists in using the « return path » of the digital 
terminals by requesting the subscriber to link all the terminals of his home to 
one and the same telephone line. The operator then periodically monitors the 

35 connection of the terminals to this telephone line by remotely instructing 
telephone calls from the terminals to a server of the operator. However, this 
solution is not satisfactory since it entails the permanent connection of the 
digital terminals of the subscriber to a telephone line. 
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Another solution described in French Patent Application No. 02 
09362 filed on 24 July 2002 by the same applicant as the present application, 
THOMSON Licensing S.A., consists in guaranteeing that a physical 
communication link always exists between a secondary terminal (or « slave » 
terminal) and a main terminal (or « master » terminal) with which it is paired. 
The slave terminal or terminals (for which the subscriber benefits from a 
preferential tariff) cannot operate, that is to say provide data in clear to the 
television set to which they are connected, unless it is verified that the 
« master » terminal with which they are paired is present in proximity. 

Several strategies for communication between these decoders are 
conceivable but some of them may exhibit risks of « piracy » or of 
« circumvention ». 

Summary of the invention 

The aim of the present invention is to afford an improvement to the 
invention described in the aforesaid patent application by minimizing the risks of 
piracy or of circumvention. 

The principle of the invention is as follows : a « master » digital 
terminal contains a smart card in which are recorded entitlements paid for by 
the subscriber at the normal tariff. A « slave » digital terminal contains a smart 
card whose entitlements, identical or otherwise to those of the smart card of the 
« master » decoder, have been paid for more cheaply by the same subscriber. 

This preferential tariff of the subscription of the « slave » decoder is 
granted by the operator on condition that the slave decoder is used by the same 
subscriber in the same accommodation as the « master » decoder. 

The basic idea from which the invention stems consists in 
considering that if the « slave » digital terminal is not in immediate proximity to 
the « master » digital terminal, it is being used in a different accommodation and 
hence the subscriber is violating the contract allowing him to benefit from a 
preferential tariff. By virtue of the present invention, if such a situation of 
fraudulent use of the « slave » digital terminal is detected, the latter ceases to 
operate normally ; in this instance, it no longer allows the subscriber to access 
all the services that he is supposed to receive (picture and sound). 

It will be noted that the invention may be implemented between a 
master digital terminal and several slaves, if the operator so permits. 

The invention relates accordingly to a system for receiving broadcast 
digital data comprising a master digital terminal, and at least one slave digital 
terminal connected to the master terminal by a link and able to receive 
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protected digital data. According to the invention, the slave digital terminal can 
access the protected data only if information necessary for accessing said data 
and received by the master digital terminal is sent by way of said link to the 
slave digital terminal within a predetermined deadline. 

The protected digital data are in particular television services 
scrambled by keys and the information for accessing the protected data is in 
particular messages containing access entitlements to the services or else 
parameters making it possible to extract from such messages data received or 
else messages containing a part of the access entitlements. 

In a particular implementation of the invention, the information 
necessary for accessing the protected data which is received by the master 
digital terminal originates from the data broadcasting system. 

Advantageously, the information for accessing the data received by 
the master digital terminal is transformed before being sent to the slave digital 
terminal. 

In another particular implementation, the information necessary for 
accessing the protected data which is received by the master digital terminal 
originates from the slave digital terminal and is transformed before being resent 
to the slave digital terminal. 

The transformation operation in the above implementations 
comprises in particular a descrambling and/or deciphering of the information in 
the master digital terminal, the descrambling / deciphering being performed with 
the aid of keys received beforehand by the master digital terminal of the 
broadcasting system. 

According to a particular characteristic of the invention, the 
predetermined deadline is counted down from the dispatching by the slave 
digital terminal of a message to the master digital terminal. 

According to another characteristic, the predetermined deadline is 
counted down from the dispatching by the broadcasting system of the data of a 
message to the master digital terminal. 

The invention also relates to a digital terminal intended to receive 
protected digital data and which can access said protected data only if 
information necessary for accessing said data and received by another digital 
terminal to which it can be connected, is sent to it by this other terminal within a 
predetermined deadline. 

The invention further relates to a first digital terminal intended to be 
connected to a second digital terminal, wherein said first digital terminal is able 
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to receive information necessary for said second terminal to access to protected 
digital data and is able to dispatch said information to said second terminal. 

To summarize, the basic mechanism of the invention is as follows : 

- the master digital terminal receives a part of the elements 
5 necessary for the descrambling of the services by the slave digital terminal ; 

- these elements are sent to the slave digital terminal under 
conditions that are well defined and in a unique manner by way of a physical 
communication link between the two terminals; 

- if the master digital terminal is not able to provide these elements to 
10 the slave digital terminal within a predetermined deadline, the slave digital 

terminal is not capable of accessing the service received. 

Brief description of the drawings 

The invention will be better understood on reading the detailed 
15 description which follows of several embodiments. This description is given 
merely by way of example and refers to the appended drawings in which : 

Figure 1 represents a schematic diagram of a system according to 
the invention. 

Figure 2 illustrates a first embodiment of the invention. 
20 Figure 3 illustrates a second embodiment of the invention. 

Figure 4 illustrates a third embodiment of the invention. 
Figure 5 illustrates a fourth embodiment of the invention. 
Figure 6 illustrates a variant of the second embodiment. 
Figure 7 illustrates a variant of the fourth embodiment. 

25 

Description of the preferred embodiments 

In Figure 1 , we have represented two digital terminals (or decoders) : 
a master terminal 1 and a slave terminal 2, which are connected by a 
communication link 3. The two terminals receive, by way of a satellite antenna 
30 4, digital data broadcast by a service operator, in particular audio/video data. 
They each comprise a smart card 15/25 inserted into a card reader of the 
terminal and in which are stored entitlements of the subscriber to access the 
services (in particular the channels transmitting audio visual programs) of the 
operator. 

35 The data received are scrambled, according to the conventional 

principle of pay digital television, by scrambling keys (often called « control 
words ») and the keys are themselves enciphered and sent in messages 
labeled ECMs (the acronym standing for « Entitlement Control Message ») with 
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the service related data. Personalized messages, labeled EMMs (standing for 
« Entitlement Management Message ») make it possible to update on each 
smart card each subscriber's « entitlement » (these entitlements may also be 
received via a subscriber telephone line to which the terminal is connected, as 
5 in the case of « pay per view » for example). 

To descramble a service to which a subscriber is entitled, the ECMs 
are dispatched to an access control module 14/24 which, in conjunction with 
the smart card 15/25, provides the corresponding deciphered descrambling 
keys, these keys making it possible to descramble the service. The smart card 

10 15/25 actually contains the elements necessary (such as deciphering 
algorithms and keys) for deciphering the descrambling keys contained in the 
ECMs messages. The descrambling keys are dynamic and change every 10 
seconds at most. This period during which a specific descrambling key is valid 
for descrambling the data is called the « key period » or « crypto-period ». 

15 it will be noted that the access control module 14/24 and the smart 

card 15/25 are merely an exemplary implementation of the access control 
system in the terminals 1 / 2. The module 14/24 may be implemented in a 
detachable module, itself possibly containing a smart card or a secure 
processor and intended to be plugged into the decoder (for example a module 

20 according to the DVB-CI standard, standing for « Digital Video Broadcasting - 
Common Interface » or according to the NRSS-B standard, standing for 
« National Renewable Security Standard »). Likewise, the removable smart 
card 15/25 can be replaced with a secure processor integrated into the 
terminal 1/2. 

25 In figure 1, the scrambled digital data are received by a 

tuner/demodulator 10 / 20 in each terminal 1 / 2. A demultiplexer and filtering 
device 11/21 extracts from the data received the ECMs and EMMs messages 
which are directed to the access control module 14/24. This module 14/24, in 
conjunction with the card 15/25, deciphers the descrambling keys so as to 

30 send them to a descrambler 12/22, which receives the audio/video data A/V 
from the demultiplexing and filtering module 11 / 21. By virtue of the 
descrambling keys received from the module 14/24, the descrambler 12/22 
can descramble the A/V data and send them to a decoder, in particular an 
MPEG decoder 13/23 that outputs audio/video signals in clear for a television 

35 set. 

According to the invention, a module for managing the pairing 
application 17 / 27 is present in the master terminal 1 and in the slave 2. It 
manages the communications between the two terminals and in particular the 
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transferring of the information from the master terminal to the slave terminal so 
as to allow the slave terminal to access the data received. This module also 
controls the deadline that passes before the receipt of this information in such a 
way as to block the operation of the slave terminal if the information is not 
5 received within the fixed deadline. A communication port 1 6 / 26 disposed in 
each terminal manages the link between the two terminals. 

Figure 2 illustrates a first embodiment of the invention, based on the 

EMMs. 

10 It consists in providing the entitlements (EMMs) of the slave digital 

terminal 2 by way of the master digital terminal 1 and of the pairing 
communication link 3, rather than via the satellite antenna 4. In practice, during 
a first step 200, the slave digital terminal 2 receives from the broadcasting 
system 5, by satellite, a message « EMM (Delete entitlements) » that erases all 

15 or part of the entitlements from his smart card 25. Immediately afterwards, 
during a step 201 , it receives an item of information « Message (Request 
entitlements from Master) » that it has to send to the master terminal 1 via the 
physical link 3 (step 202). The master digital terminal uses this item of 
information to pick up an EMM sent slightly later (step 203). This message 

20 « EMM (Slave Entitlements) » is then immediately sent back to the slave digital 
terminal via the communication link 3 during the step 204. The message « EMM 
(Slave Entitlements) » allows the slave terminal 2 to update its entitlements in 
its smart card in step 205. 

Preferably, the message « EMM (Slave Entitlements) » is sent during 

25 step 204 while being protected by enciphering. For example, it is assumed that 
the modules for managing the pairing applications 17 and 27 that are present in 
the terminals 1 and 2 each possess a secret key shared by the two modules 17 
and 27. The module 17 enciphers the message « EMM (Slave Entitlements) » 
with the secret key before dispatching it over the link 3 and the module 27 

30 deciphers it with the secret key when it receives it. This shared secret key may 
have been received from the broadcasting system 5 in specific EMMs or may 
have been programmed into the terminals 1 and 2 at the time of their 
manufacture or when they were brought into service. 

According to the principle of the invention, if the response from the 

35 master terminal 1 is not received within a due deadline (maximum deadline At), 
the slave decoder is blocked (step 206), until the next sending of EMMs. 

It will be noted that the frequency of sending of the EMMs may be 
small (one or more days). Moreover, the maximum due deadline At should be 
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long enough for the digital terminals to have time to process the information and 
short enough for a delay introduced by an intermediary of Internet Network type 
to be prohibitive and to block the slave terminal. A deadline At of the order of a 
second may for example be suitable. 

5 

Figure 3 illustrates a second embodiment of the invention, likewise 

based on the EMMs. 

It consists in providing the slave digital terminal 2 with the filtering 
information for the EMMs by way of the master terminal 1 and of the pairing 

1 0 communication link 3. 

During a first step 301, the slave terminal 2 receives from the 
broadcasting system 5 a message « EMM (Delete entitlements) » that cancels 
all the part of the entitlements of its card 25. Immediately afterwards, during a 
step 302, the master terminal receives and sends back (step 303) a message 

1 5 containing the filtering parameters for the EMMs « Message (Slave EMM 
filtering info) » of the slave terminal, this information having to be dispatched to 
the slave terminal via the communication link 3 within a given maximum 
response time. The slave digital terminal 2 then initializes (step 304) its filters 
(contained in the Demultiplexer/Filters module 21) with the parameters 

20 received. Preferably, the message sent in step 303 is protected by enciphering 
in the same manner (set forth hereinabove) as that employed to protect the 
message sent in step 204 of Figure 2. 

When, in step 305, the entitlements (« EMM (Slave Entitlements) ») 
are then broadcast by the services operator (from the broadcasting system 5) to 

25 the slave terminal 2, the latter can, by virtue of the information received from the 
master terminal, pick up the EMM containing the entitlements of the « slave » 
card 25 and update its entitlements in step 306 so as to continue to operate 
normally. 

If the slave digital terminal 2 has not received the EMM filtering 
30 information within the due maximum response time imposed in order for the 
master terminal to send them back, the entitlements of the slave terminal 2 are 
not restored, and it no longer operates normally. In practice, the maximum 
response time is counted down at the level of the broadcasting system 5 
between the sending of the « Message (Slave EMM filtering info) » and the 
35 sending of the message « EMM (Slave Entitlements) ». This maximum 
response time is for example of the order of a second and may vary from one 
system to another. 
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Other simple variants may be envisaged : for example the master 
terminal receives from the broadcasting system 5 a part of the EMM 
(respectively of the ECM) of the slave terminal then it sends it back to the slave 
terminal within a limited time span. 
5 Figure 4 illustrates a third embodiment of the invention, now based 

on the ECMs rather than on the EMMs. 

According to this method, the ECMs containing the descrambling 
keys necessary for descrambling the audio/video data of the program selected 
on the slave terminal 2 are not deciphered in the slave terminal (by the access 
10 control module 24 in conjunction with the smart card 25), but in the master 
terminal 1 (by the access control module 14 in conjunction with the smart card 
15). The elements (keys and algorithms) necessary for deciphering the 
descrambling keys are contained only in the master terminal (more precisely in 
its smart card 15). 

15 In practice, and as illustrated in Figure 4, when an ECM is received 

by the slave terminal 2 with the scrambled data stream containing in particular 
audio visual programs (step 401), the ECM (or just the enciphered 
descrambling keys that it contains) is immediately dispatched to the master 
terminal 1 via the physical link 3 (step 402). The descrambling keys are then 

20 deciphered in step 403 with the aid of the elements contained in the smart card 
15. Then, during step 404, the descrambling keys thus deciphered are returned 
to the slave terminal 2 which can thus initialize the descrambler 22 for the next 
crypto-period (or « key-period »). The descrambling of the programs can thus 
take place successfully in step 405. 

25 If on the other hand the deciphered descrambling keys are not 

received in time by the slave terminal 2, the latter cannot descramble the data 
containing the programs that it receives. 

The operation described above is repeated for each crypto-period (or 
« key period ») and steps 406 and 407 correspond to steps 401 and 402 

30 respectively. 

Preferably, the message sent in step 404 containing the deciphered 
descrambling keys is protected by local enciphering between the master 
terminal 1 and the slave terminal 2 in the same manner (set forth hereinabove) 
as that employed to protect the message sent in step 204 of Figure 2. 

35 A limited time span (labeled « Max response time » in Figure 4), 

which can vary from one system to another and which is for example of the 
order of a second, can furthermore be imposed between the dispatching (step 
402) by the slave terminal 2 of the messages containing the enciphered 
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descrambling keys to the master terminal 1 and the receipt (step 404) of the 
deciphered keys by the slave terminal 2. This constraint makes it possible to 
limit the possibilities of circumvention by Internet. 

5 The implementations described hereinabove involve certain 

constraints of usage of the master terminal : it must be active and able to 
receive the EMMs/ECMs/messages permanently, on the one hand since the 
broadcasting of the information by the broadcasting system is not predictable 
over time and on the other hand because the broadcasting system has no 
10 return of information regarding the fact that these EMMs/ECMs/messages have 
been received by their intended recipients. 

The fourth embodiment of the invention which follows, illustrated by 
Figure 5, makes it possible to reduce these constraints. 

According to this embodiment of the invention, all or part of the 
1 5 information allowing the slave terminal 2 to construct its entitlements is received 
in EMM form that we shall call « EMM (partial Slave entitlements) » and stored 
by the master terminal 1 . The slave terminal 2 will request this information from 
the master terminal at a subsequent time. 

In Figure 5, in step 501 the slave terminal 2 receives from the 
20 broadcasting system 5 an EMM containing part of the information allowing 
reconstruction of its entitlements and in step 502 the master terminal 1 receives 
an EMM containing information, complementary to that sent to the slave 
terminal 2 in step 501 , for reconstructing the entitlements of the slave terminal. 
Naturally, steps 501 and 502 may be performed simultaneously or in a reverse 
25 order. 

The time at which the exchange of information between the two 
terminals occurs is preferably chosen in such a way as to guarantee that this 
exchange will be successful (for example just after having verified that the 
communication between the two decoders is operational and/or making sure of 

30 the presence of the subscriber near his slave terminal so that he can follow any 
instructions). The step labeled step 503 in Figure 5 represents this wait for an 
appropriate moment for transferring the partial entitlements of the slave 
terminal. The operation of transferring the entitlements must however take place 
during a limited time interval, corresponding to the « update window » in Figure 

35 5 (for example a few days) after the arrival of the EMMs, else the software 
module 27 of the slave terminal cancels the entitlements of its smart card 25. 

The appropriate moment having come (step 504), the slave terminal 
2 requests the EMM information from the master terminal 1 by dispatching to it 
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a « Message (Slave entitlements request) » during step 505. The master 
terminal 1 must return this information in the form of a « Message (Slave 
Entitlements) » (dispatched in step 506 in Figure 5) within a maximum deadline 
of a few tens of milliseconds (« max response time » in Figure 5). If the slave's 
5 complementary partial entitlements are received within this deadline, then the 
updating of the entitlements of the slave terminal 2 is performed successfully 
(step 507). On the other hand, if this information is not received within the 
« max response time » deadline, the slave terminal ceases waiting for new 
entitlements (step 508) and the module for managing the pairing application 27 

10 of the slave terminal cancels the entitlements of its smart card 25. Preferably, 
the message dispatched in step 506 is protected by enciphering as was seen 
previously for the other exemplary implementations. 

When the update window expires without an appropriate moment for 
the transfer having been detected, the software module 27 of the slave terminal 

15 also cancels the entitlements contained in its smart card 25 (step 509). 

The following fifth embodiment of the invention which is illustrated by 
Figure 6 makes it possible to reduce a risk related to the possible emulation of 
the messages dispatched by the master terminal to the slave terminal by an 

20 outside device. 

The information that is provided to the slave terminal is extracted 
from the stream broadcast by the broadcasting system by the master terminal. 
In the first two implementations illustrated by Figures 2 and 3, the information 
received by the master terminal 1 must be transferred to the slave terminal 2 

25 immediately after receipt. A pirate device could be tempted to discover a 
correlation between the message flowing over the communication link 3 and the 
content of the broadcast transport stream received by the master terminal in 
previous instants, and thus be capable of reproducing the scheme for 
processing the transport stream so as to generate an identical message for the 

30 slave terminal within a sufficiently short deadline. This device could be either a 
computer equipped with a tuner/demodulator/demultiplexer, or the equivalent of 
another decoder together with suitable software, and be placed in proximity to 
the slave terminal, far from the master terminal. 

To prevent it being possible to find such a correlation, the information 

35 received by the master digital terminal 1 must be transformed, according to this 
preferred implementation of the invention, before being dispatched to the slave 
terminal 2. The safest means available in a digital terminal for performing this 
transformation is the use of the DVB descrambler 12 / 22 in Figure 1 . 



Express mail: EV 405245068 US PF030029 

11 

In practice, the broadcasting system dispatches a special ECM to the 
master terminal 1, this special ECM containing a specific descrambling key 
intended for descrambling a message dispatched subsequently to the master 
terminal 1. This ECM message is protected in a manner known per se by 
5 enciphering. When the ECM is received by the master terminal 1, it is 
deciphered in a master smart card 15, so as to obtain the specific descrambling 
key. The message containing the information for the slave terminal 2 is then 
dispatched to the master terminal 1 in data packets scrambled with the specific 
key. The master terminal descrambles these data packets with the aid of the 
10 specific key received previously. Once descrambled, the packets may be 
processed by the master terminal 1 so as to generate the message destined for 
the slave terminal 2. 

This method is applicable to all the variant embodiments cited above. 
In Figure 6, it is applied to the second embodiment of the invention. 
15 During step 601, the ECM containing specific descrambling keys is 

dispatched by the broadcasting system 5 to the master terminal 1 , then it is 
deciphered by the master terminal in step 602 to obtain the descrambling keys. 
Thereafter, steps 603 to 609 are similar to steps 301 to 306 described 
previously in conjunction with Figure 3, with the exception of the fact that the 
20 message containing the information for filtering the slave EMM, the latter having 
been dispatched to the master terminal during step 604, is dispatched in data 
packets scrambled with the aid of the specific keys received previously, then is 
descrambled during a supplementary step 605 in the master terminal 1 . It will 
also be noted that step 603 that occurs after steps 601 and 602 in Figure 6 may 
25 also take place just before step 601 or between steps 601 and 602. 

Figure 7 illustrates another variant embodiment making it possible to 
cater for another risk. This risk identified in particular for the fourth type of 
implementation (described previously in conjunction with Figure 5) is that of the 

30 emulation by an external device of the messages (of the type « Message (Slave 
entitlements request) ») dispatched by the slave terminal 2 to the master 
terminal 1 so as to retrieve the partial information stored in the master terminal 
1 making it possible to reconstruct the entitlements of the slave terminal. 

An external device connected to the master terminal could thus 

35 emulate the request of the slave terminal and intercept the response of the 
master terminal. This response could then be dispatched by the Internet to 
another external device linked to the slave terminal, that could then provide the 
right information when the slave terminal requests it. 
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To prevent such emulation, it is possible to propose either the use of 
a protocol secured with authentication, or more simply to use, as in previous 
variants, the resources of the smart card and of the broadcasting system. 

According to the principle of this variant embodiment, the 
5 broadcasting system 5 dispatches at a given moment (here, after having 
dispatched the EMM messages containing the information making it possible to 
reconstruct the entitlements of the slave terminal during steps 701 and 702 - 
which correspond to steps 501 and 502 of Figure 5) to the master terminal 1 
and to the slave terminal 2 a special ECM, containing one or more keys for 
10 descrambling a secret code. This ECM is dispatched to the slave terminal 
during a step 703 and to the master terminal during a step 704. The ECM 
received by each terminal is then deciphered in the smart card 15 / 25 of each 
terminal (steps 705 to 706) so as to obtain the key or keys for descrambling the 
secret code. Next, the broadcasting system 5 dispatches to each of the 
15 terminals in steps 707 and 708 an identical message (« Message (scrambled 
secret code) »), scrambled with these previously received keys. The messages 
containing the secret code are descrambled in each terminal 1 / 2 with the aid of 
the smart cards 15/25 and of the descrambler 12/22 during step 709 and 710. 
The slave terminal 2 then dispatches to the master terminal 1 a message 
20 containing the secret code obtained (step 711). 

The master terminal 1 waits for this message for a limited time span 
indicated in Figure 7 by « max response time of the Slave ». If it receives it in 
time, it verifies during a step 712 that it is indeed the secret code expected by 
comparing it with that which it has itself received, then, in case of positive 
25 verification, it responds by dispatching to the slave terminal 2 a message 
containing the information necessary for reconstructing the entitlements of the 
slave terminal (step 713). The slave terminal 2 can then update its entitlements 
on its smart card 25 successfully (step 714). If the master terminal 1 has not 
received the expected message containing the secret code within the due time 
30 (step 715) or if the message received from the slave terminal 2 does not contain 
the secret code that the master terminal has received beforehand from the 
broadcasting system 5, it does not dispatch the information to reconstruct the 
entitlements of the slave. 

Once its message has been dispatched, the slave terminal 2 likewise 
35 waits for the response of the master terminal 1 for a limited time span indicated 
in Figure 7 by « max response time of the Master ». If the information does not 
arrive within the due deadlines (step 716), then the slave terminal 2 does not 
update the entitlements of its smart card. 
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Such a device therefore makes it possible, on the one hand to render 
the exchange of information unpredictable, and on the other hand imposes the 
real-time constraint that prevents potential circumvention by Internet. 

In another variant, it is also possible to use the principle described in 
5 Figure 7 in an implementation other than that consisting in dispatching EMMs 
containing partial information for reconstructing the entitlements of the slave 
terminal. Provision may in particular be made, at regular intervals (for example, 
each week or each day), for the broadcasting system 5 to dispatch ECMs 
messages such as those dispatched in steps 703 and 704 to the master 

10 terminal 1 and to the slave terminal 2. Steps 707 to 712 run in the same manner 
as in Figure 7, then, in case of positive verification the secret code in step 712, 
the master terminal dispatches a message signifying that the code received is 
correct. If this message is received after the expiry of the « max response time 
of the Master » or if the code received is not correct, provision is made in this 

15 case for the slave terminal itself to delete the entitlements contained in its smart 
card 25. 

The invention is not limited to the embodiments described 
hereinabove. Another variant may in particular be envisaged in the 

20 embodiments illustrated in Figures 2, 3 and 6. In all these embodiments, it is 
possible, instead of dispatching a message « EMM (Delete entitlements) » at 
the start of the protocol so as to erase the entitlements of the slave terminal, to 
wait for the end of the protocol and, if the predetermined deadline has passed 
without the slave terminal having received the necessary information from the 

25 master terminal, then provision may be made for the slave terminal itself to 
delete its entitlements (for example by erasing them from its smart card 25). 

The advantages of the invention are as follows : since it is based on 
security elements of the broadcasting system itself (the information exchanged 

30 between the terminals is enciphered with secrets managed by the data 
broadcasting system and by the smart cards of the digital terminals), the risk of 
piracy at the level of the smart card or of the digital terminal is reduced. 

Moreover, since the invention may relay on the "real time" aspect of 
the implementation, the risk of prolongation of the physical link between two 

35 digital terminals by telephone or Internet network is considerably reduced. 
Specifically, the physical link between the two digital terminals master and slave 
could be "lengthened" indefinitely by an Internet link: the service operator would 
then no longer have the guarantee that the two terminals in the same household 
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of a subscriber. By imposing, according to the principle of the invention, a 
maximum deadline for the transferring of the data, one thus ensures that the 
information does not travel via an Internet type link. 

Another advantage of the invention is that it guarantees that each 

5 exchange of data is different from the previous one, and hence unpredictable. 
Specially, a pirate could be tempted to spy on the information which is received 
by the terminals so as to emulate the information expected on the part of the 
master digital terminal by the slave digital terminal with the aid of a pirate device 
(a computer for example). Since the information that is exchanged between the 

10 terminals changes with each communication, it is unpredictable and cannot 
therefore be easily emulated by a pirate device. 



